Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/U5m4Q08MUG_kHRgMBjTMJaZRUFI.roa
File: U5m4Q08MUG_kHRgMBjTMJaZRUFI.roa (raw, json)
Hash identifier: FoRnCMIxqXq0d68LNEVio8ucP1tDT+epYvMJzCIbUjs=
Subject key identifier: 53:99:B8:43:4F:0C:50:6F:E4:1D:18:0C:06:34:CC:25:A6:51:50:52
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01862CB5AEDB46E15AF8E7F9869C4E04C27D
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/U5m4Q08MUG_kHRgMBjTMJaZRUFI.roa
Signing time: Tue 07 Feb 2023 16:29:09 +0000
ROA not before: Tue 07 Feb 2023 16:29:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198335
IP address blocks: 213.198.104.0/24 maxlen: 24
213.198.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:b5:ae:db:46:e1:5a:f8:e7:f9:86:9c:4e:04:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Feb 7 16:29:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5399b8434f0c506fe41d180c0634cc25a6515052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:d1:63:90:2e:26:d2:33:fa:04:ba:10:be:
d7:71:a9:40:3b:02:f7:b5:02:be:6d:4c:a6:0a:4b:
9c:8e:fc:07:5b:27:4f:05:ee:bd:ff:52:58:5d:8e:
65:fc:fd:0c:2c:47:9e:1f:32:33:b1:78:6e:c9:dd:
37:1a:9c:33:a0:ea:7a:31:a2:d5:d9:08:b5:95:96:
5f:31:4f:35:b4:fb:97:a3:d5:36:d4:88:ac:af:94:
c0:51:d7:10:ef:50:a0:d6:b3:50:b8:88:91:30:a0:
c3:20:95:76:3b:a3:7f:98:0f:55:58:64:87:79:e5:
d8:20:8d:d1:2a:9e:5e:12:f1:14:9d:2f:55:21:e5:
1b:c6:2d:c5:8e:25:74:fc:53:12:9e:c5:5c:a1:42:
ef:50:3f:9f:a6:34:12:1b:cd:1c:5c:a6:c3:2d:85:
c2:7a:0c:23:b0:dc:6a:c4:29:f4:41:33:dc:61:01:
af:6a:b2:68:11:9b:2f:03:ed:b5:27:df:a9:38:72:
57:dd:76:8a:df:89:88:73:06:f2:57:af:a8:4e:ef:
db:79:c7:91:ab:76:25:02:23:8c:e7:ce:b8:69:6a:
7a:bd:6c:fa:28:02:6c:0b:98:ae:b9:7d:30:41:e8:
9b:a8:8c:9f:0a:20:7f:10:7f:01:1c:03:f6:2a:c0:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:B8:43:4F:0C:50:6F:E4:1D:18:0C:06:34:CC:25:A6:51:50:52
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/U5m4Q08MUG_kHRgMBjTMJaZRUFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.104.0/22
Signature Algorithm: sha256WithRSAEncryption
32:65:11:f8:87:69:c2:eb:38:3f:c8:ca:8f:26:a7:20:23:d3:
bf:14:09:98:8a:91:12:f8:ad:a9:13:77:8b:0e:ec:f8:06:04:
de:28:d1:86:be:8d:e0:51:ff:2d:b6:c2:70:22:3f:17:e0:34:
96:13:7f:e2:fd:08:21:3a:23:22:2b:e0:7d:2d:c4:df:b9:a0:
ca:9e:26:20:e8:5b:05:02:81:cd:d6:36:d4:97:b0:9a:6f:c9:
5c:48:19:f3:b1:9f:c9:d0:3b:a3:51:86:fa:4d:75:04:a5:e8:
e5:ca:7d:57:34:5b:33:e2:1f:bd:77:5d:1a:4a:28:d7:e2:f6:
9d:a8:db:d4:74:c5:71:c1:c7:45:da:e6:0e:da:9c:52:f5:40:
7a:7a:53:d6:34:05:4d:08:b3:b2:ed:86:5c:16:0e:8f:cf:f4:
ad:32:81:ca:b9:46:d7:3d:ef:1b:b4:34:0f:05:1f:36:ea:8d:
4e:3f:2e:14:f4:d0:87:7e:ae:d2:6d:53:08:be:99:8c:a0:9a:
67:27:03:ac:2a:18:74:c6:62:e3:0f:7c:8a:af:36:25:a9:2e:
4c:9e:5a:96:ef:b3:ab:b9:c1:80:be:69:fb:3f:ef:0a:0d:fa:
c0:e0:8a:8b:75:db:29:e0:88:ec:7b:0c:bb:97:20:4f:bd:2c:
a9:50:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org